This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/7fVHLIE5Fr7X8yFvO0PeQIriJkk.roa
File:                     7fVHLIE5Fr7X8yFvO0PeQIriJkk.roa (raw, json)
Hash identifier:          V2T+9sBa8KkNKPdhdy6f3WlbGWAyrtoeOYEsZ7+3u8w=
Subject key identifier:   ED:F5:47:2C:81:39:16:BE:D7:F3:21:6F:3B:43:DE:40:8A:E2:26:49
Certificate issuer:       /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial:       019AA715809FBBBCDE36D6861C0919E32CC0
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/7fVHLIE5Fr7X8yFvO0PeQIriJkk.roa
Signing time:             Fri 21 Nov 2025 15:43:15 +0000
ROA not before:           Fri 21 Nov 2025 15:43:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59460
IP address blocks:        185.135.192.0/22 maxlen: 22
                          185.135.192.0/24 maxlen: 24
                          185.135.193.0/24 maxlen: 24
                          185.135.194.0/24 maxlen: 24
                          185.135.195.0/24 maxlen: 24
                          194.146.4.0/22 maxlen: 22
                          194.146.4.0/24 maxlen: 24
                          194.146.5.0/24 maxlen: 24
                          194.146.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a7:15:80:9f:bb:bc:de:36:d6:86:1c:09:19:e3:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
        Validity
            Not Before: Nov 21 15:43:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=edf5472c813916bed7f3216f3b43de408ae22649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:3f:f6:39:4c:a7:a1:1e:36:b0:14:b8:82:
                    43:f5:fa:0e:8e:c6:39:6d:8b:80:07:dc:1c:03:f4:
                    aa:82:63:ab:e9:46:2c:07:d4:45:f9:8c:26:a3:6f:
                    be:f6:68:41:e7:61:e8:78:93:58:6a:08:3e:09:c5:
                    c5:c8:c7:74:5e:22:2d:93:0b:a5:17:06:f9:4c:2a:
                    75:76:23:f3:24:2b:6f:06:9d:b7:e3:45:2c:fd:d6:
                    24:b8:ad:86:4d:bd:8c:01:a4:6f:d0:0c:6f:ec:99:
                    1a:ca:ca:53:f5:1b:6e:2b:e3:c7:c4:c0:a6:d2:06:
                    42:22:8e:ed:5f:f6:4e:e2:46:16:d9:66:b2:60:b4:
                    a8:c0:3b:a0:9a:ee:c0:72:92:1f:c1:2e:da:11:14:
                    1c:58:c0:10:96:30:d0:d5:8e:18:bd:3f:4b:2e:c0:
                    42:46:44:46:e3:e7:b1:cc:a4:a3:38:36:52:b7:2c:
                    69:c3:e6:0f:b8:7d:e5:9a:07:d8:84:59:6c:aa:47:
                    a2:68:20:2c:b7:c6:24:25:4c:1e:b0:8e:47:81:b9:
                    2c:7d:0c:cc:5a:5a:df:1f:d5:13:5d:d4:27:34:0b:
                    c0:95:96:46:af:a8:b7:a2:e3:c0:b3:43:00:df:ee:
                    7d:a4:01:d3:37:17:25:c6:44:d1:7c:e8:94:82:c3:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:47:2C:81:39:16:BE:D7:F3:21:6F:3B:43:DE:40:8A:E2:26:49
            X509v3 Authority Key Identifier:
                keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/7fVHLIE5Fr7X8yFvO0PeQIriJkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.192.0/22
                  194.146.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:c3:35:84:a1:62:cc:00:59:dd:72:ba:db:27:bc:c2:8f:33:
         f0:6a:2a:c5:68:0a:0e:7f:25:24:06:93:1a:d8:79:f5:1a:e3:
         62:be:72:e2:e4:22:3b:a2:08:de:56:26:44:47:9f:7c:53:0a:
         d2:2a:74:91:23:5a:e2:f8:ce:ee:64:5a:9f:59:68:62:f2:82:
         3c:98:50:d1:b6:83:79:02:0a:61:58:95:73:fe:27:6b:de:0e:
         71:4c:76:16:0f:53:30:5e:4e:59:b9:f6:ba:9b:c0:89:5f:88:
         be:f4:07:27:2d:7b:05:e7:ed:a7:9e:19:04:ce:f9:4f:e5:dc:
         ca:c0:7f:af:b2:6e:d7:01:9a:7a:c9:b5:6e:a4:c2:df:ff:68:
         0b:7b:d5:75:64:d1:1d:98:28:d2:17:b9:e6:62:6f:73:f0:fb:
         10:28:1f:ad:89:43:38:ca:59:a9:4e:b6:cb:78:5b:d9:b9:30:
         45:aa:d9:99:46:c0:79:05:1d:49:e6:d9:05:e4:d2:3a:0d:dc:
         83:87:6d:53:46:20:28:13:23:8b:84:7f:9a:c5:55:76:3c:52:
         08:5e:8c:13:d2:b5:33:dd:0e:a4:6a:3e:89:1f:25:23:47:72:
         e3:1b:19:37:06:5e:af:e9:6e:6e:53:27:87:59:65:12:46:9e:
         37:76:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 04:04:35 2025 by rpki-client